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ABSTRACT 


One  of  the  problems  that  has  been  of  concern  for  a  number  of  years  Is  • 
the  following:  Suppose  that  there  exists  a  series  system  of  m  exponen¬ 
tially  lived  components  and  we  ask  that  the  system  be  qualified  for  service 
by  demonstrating  a  reliability  that  equals,  or  exceeds,  a  specified  value 
1  -  a,  with  a  confidence  level  at  least  1  -  y  (Here  a  and  y  are 
small).  This  paper  addresses  the  question  of  how  this  can  be  demonstrated 
using  only  data  on  the  reliability  of  the  components,  where  the  reliability 
design  goals  for  each  component  must  be  apportioned,  as  well  as  the  confidence 
levels  at  which  the  design  goals  must  be  met  in  order  to  satisfy  the  overall 
system  reliability  requirement.  Another  question  that  is  addressed  is  the 
calculation  of  the  probability  that  the  system  reliability  exceeds  its  goal. 
The  purpose  of  the  paper  is  to  make  a  comparison  between  competing  theories 
for  the  above  situation  when  the  components  have  exponential  life  lengths. 
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1.0  INTRODUCTION 

One  of  the  problems  that  has  been  of  concern  for  a  number  of  years 
is  the  following:  Suppose  we  have  a  series  system  of  m  exponentially 
lived  components  and  we  ask  that  the  system  be  qualified  for  service  by 
demonstrating  a  reliability  that  equals,  or  exceeds,  a  specified  value 
1  -  a,  with  a  confidence  level  at  least  1  -  y  (Here  a  and  y  are 
small.).  How  can  this  demonstration  be  accomplished  using  only  data  on 
the  reliability  of  the  components?  Since  for  all  t  >  0 


m 

R(t)  =  ri  r,  (t>  , 

i=i 


where 

R^(t)  =  e  for  some  >  0  , 

is  the  equation  for  the  system  reliability  in  terms  of  the  reliability  of 
the  components,  the  question  becomes  that  of  apportioning  the  reliability 
design  goals  for  each  component ,  as  well  as  the  confidence  levels  at  which 
the  design  goals  must  be  met,  in  order  to  satisfy  the  overall  system 
reliability  requirement.  This  particular  problem  has  been  around  in  this 
form  for  at  least  twenty-five  years  (since  the  days  of  the  VI).  See  [2]. 

Another  problem,  which  is  related  to  the  one  preceeding,  arises  at  a 
somewhat  later  time  during  system  development.  If  we  have  estimates 
based  on  the  performance  data  of  the  i^1  component  such  that  for  a  fixed 
t  >  0 

P[R1(t)  >  R^t)  =  1  - 


i  =  1 ,  • • «,m 
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then  with  what  confidence,  i.e.,  as  what  function  of  the  confidence  levels 
,  can  we  say  that 

'  m  m 

p  n  R±(t)  i  n 

_i-l  i=l  1 

That  is,  we  ask  what  is  the  probability  that  the  system  reliability  exceeds 
its  goal? 

An  additional  complication  which  arises  is  that  the  number  of  failures 
of  each  component  tested  is  usually  quite  small.  This  is  endemic  since  a 
large  number  of  failures  would  not  be  tolerated  during  a  short  test  period, 
for  if  it  were  to  occur,  that  component  would  be  redesigned.  Furthermore, 
lengthy  testing  in  realistically  simulated  usage  for  highly  specialized  and 
complex  systems  is  just  too  expensive.  An  archtypical  example  of  this  type 
of  situation  is  the  components  for  the  Saturn  missile  system. 

For  over  a  decade  there  have  been  "solutions"  presented  to  this  problem 
in  terms  of  approximate  distributions  for  the  true  confidence  level. 

However,  none  of  them  have  been  completely  accepted  because  of  their 
requiring  either  extensive  tables  or  much  computation  for  their  Implementa¬ 
tion.  But  in  addition,  even  if  this  were  not  the  case,  there  would  be  the 
nagging  uncertainty,  since  the  exact  solutions  are  unknown,  as  to  how  good 
the  approximation  really  is. 

One  suggestion  that  has  arisen  in  this  partial  vacuum  has  been  the 
H.ivesian  method  of  obtaining  confidence  intervals  which  postulates  that  the 
t.r.  lure  rates  ,  are  r  Arise  va:.a*lc»  ..v  /  *  .•  ;r.  r  : 
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Such  an  assumption  does  yield  an  exact  (Bayesian)  confidence  level,  but 
whether  or  not  such  a  model  is  appropriate  for  all  situations  (or  even  any) 
is  a  matter  of  some  controversy.  However,  this  procedure,  which  necessar¬ 
ily  assumes  prior  information  summarized  in  a  particular  way,  often  may 
yield  tighter  confidence  bounds  than  those  obtained  as  the  inverse  of  a 
statistical  test  (see  [14]).  Another  concept  utilizes  a  fiducial  interpre¬ 
tation  of  confidence  bounds  (see  [4]).  The  catch  is  whether  such 
restrictive  assumptions  apply  to  the  case  at  hand. 

The  applicability  of  the  asymptotic  distributions  of  certain  statistics 
(such  as  the  maximum  likelihood  estimates  or  the  log- likelihood  ratio)  to 
this  problem  has  been  recently  extended  both  by  broadening  the  class  of 
structure  functions  and  the  type  of  data  on  performance  which  can  be 
considered.  This  was  accomplished  in  a  series  of  papers. 

Approximate  confidence  intervals  for  the  reliability  of  any  system 
(or  structure)  which  can  be  represented  by  a  monotone  Boolean  function  of 
Bernoulli  variates  were  first  obtained  using  the  asymptotic  distribution 
of  the  likelihood  ratio  in  [11].  In  this  study  component  failure  data  were 
the  outcomes  of  a  number  of  Bernoulli  trials  of  the  success  or  nonsuccess 
of  the  component.  Later  similar  asymptotic  results  were  obtained  for  all 
coherent  systems  under  the  assumption  that  the  components  were  exponen¬ 
tially  lived  and  failure  data  were  available  for  each  component  (see[9]). 
Both  of  these  papers  were  extensions  of  the  results  of  Madansky  [7]  for 
series,  parallel  and  series-parallel  systems  with  binomial  data  on  the 
reliability  of  each  component  and  the  use  of  the  asymptotic  distribution 
of  the  log-likelihood  ratio  to  compute  the  confidence  bounds.  Also,  these 
papers  depended  upon  the  precise  definition  of  coherent  eyeter:. ,  j»J  •/«•?., 
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in  [3],  and  the  theory  of  confidence  regions  involving  constraints  presented 
in  [8].  A  comparison  between  the  results  of  [11]  and  the  use  of  asymptotic 
normality  of  maximum  likelihood  estimates  was  accomplished  in  [10]  for  the 
case  of  oinomial  data  on  the  components'  reliability.  What  we  now  under¬ 
take  is  to  make  a  comparison  between  competing  theories  for  the  situation 
when  the  components  have  exponential  life  lengths. 

Kecent  publications  of  Sarkar  [13]  and  Lieberman  and  Ross  [6]  give 
solutions  to  the  problem  of  exact  confidence  bounds  for  series  systems 
which  have  Independent  exponentially  distributed  component  lives.  The 
latter  method  appears  to  be  not  only  elegant  but  the  equal  in  computational 
simplicity  to  any  method  proposed  hithertofore  and  superior  in  many  cases 
because  of  its  high  utilization  of  the  data  and  its  consequent  precision 
of  the  resulting  confidence  Interval.  We  shall  Include  this  method,  a 
suitable  generalization  to  arbitrary  systems.  In  our  comparisons. 
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2.0  THE  ASYMPTOTIC  RESULTS 

Suppose  we  have  a  coherent  structure  function  4>  of  order  m  from 
which  we  obtain  a  system  with  components  which  have  independent  exponen¬ 
tially  distributed  lines  T  •••,  T^.  The  reliability  of  the  system  is, 
at  any  time  t  >  0, 

(2.1)  R  ft)  *  E$({T.  >  t },••••, {T  >  t}) 

<p  l  m 


1 

V 

yr-o 


1  m  -X  t  1-y  _x  v  , 

S  )  II  (1-e  )  e  1  1 

~-0  1  m  i-1 


y  "0 
m 


where  (it)  is  the  indicator  of  the  relation  n  being  one  if  true  and 
zero  otherwise,  and  Ai  is  the  failure  rate  of  Tj. 

In  certain  cases  when  we  consider  the  reliability  only  at  a  fixed 

time,  it  may  be  preferable  to  consider  Equation  (2.1),  which  la  an  expec¬ 

tation  involving  exponential  component  life  lengths,  as  same  function, 
say  h  (A),  of  the  vector  of  component  failure  rates  A  •  (A1,**,*,A  ) 
with  Aj  the  failure  rate  of  the  l1*'  component. 

Those  asymptotic  procedures  which  have  been  proposed  depend  upon  the 
sample  size  for  data  on  each  component  being  large  and  thus,  for  proper 

usage,  required  a  determination  of  when  the  sample  sizes  are  large  enough 

for  the  asymptotic  result  to  be  applied.  Assisnlng  the  condition 


(2.2) 


*  i.O 

l-l  nl 


•  L 

where  n^  is  the  ntvber  of  failures  observed  for  the  l,n  opponent 
during  testing,  we  haw  the  folluwing  two  well-known  results: 
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A  question  of  practical  interst  is  whether  either  one  converges  rapidly 
enough  to  be  usable  for  the  sample  sizes  which  are  available.  To  explore 
sufficient  conditions  for  convergence  requires  not  only  some  mathematical 
analysis  but  some  Monte  Carlo  simulation  as  well.  We  also  note  that  both 
of  the  proceeding  results  are  stated  for  a  fixed  time  which  is  omitted 
from  the  notation.  Presumably  the  conditions  for  convergence  could  be 
altered  by  the  choice  of  a  different  time  constant. 
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3.0  SYSTEM  FAILURES  GENERATED  FROM  COMPONENT  FAILURE  DATA 

Suppose  we  have  _>  1  independent  observations  of  T^ ,  say 

(3.1)  til,ti2’***  ^in  for  1  “  l.***.ni  . 

We  wish  to  use  this  data  on  the  components  to  "simulate"  the  systems 
behavior  and  either  to  construct  an  estimate  of  the  structural  reliability 
R  as  a  function  of  time  t  or  to  estimate  the  reliability  h  at  a  fixed 
time.  To  do  so  we  utilize  a  straightforward  extension  of  the  procedure 
given  by  Lieberman  and  Ross  for  series  systems  in  [6). 

Take  the  first  observation  t.^  for  i  -  l,***,m  from  each  sample 
and  let 

0*2)  Xj  -  max  (t:  $(  tj^  >  T  ,•••,  tffll  >  t  )  -  1) 

be  the  longest  time  the  system  lives  with  the  specified  life  lengths  for 
each  component.  We  may  write  this  more  conveniently.  Let  •••,!>  denote 
the  r  minimal  paths  of  the  structure  $.  Then  for  components  with  random 
life  lengths  Tj,*»«,T  ,  it  is  known  that  we  can  write  (see  [3])  the 
system  life  as 

r 

(3.3)  X  »  t(T.,***,T  )  «  max  min  T, 

^  ^  • _ i  i 1 


R(t)  *  P[t(T.,*««,T  )  >  t]  for  t  >  0 
i  m 


and 


—8— 


Thus  In  terras  of  system  life  and  the  observations  t^  for  i  -  l,***,m 
we  may  rewrite  (3.2)  as 


x,  -  max  min  t  . 
J-l  icPj  11 


On  the  basis  of  the  data  on  the  components  a  system  failure  x,  has  been 
generated  which  clearly  has  the  survival  distribution  R. 

We  now  generate  for  i  - 


<:!!  • 


r-* 

(ii,i  -  *i  if 


if  iii-xi 


iii  >  xi 


and  for  J  _>  2 


('i.j+l 

t(2)  -  J 

if  *i,i  i 

1,J  ) 

“  ‘i.i  * 

We  have  for  i*l,,**,m  a  new  sample  of  mutually  Independent  observations, 
each  with  the  same  distribution  as  ,  namely 


,  (2)  .(2) 
-1,1* 


(2)  ...  t<2) 

i.2*  * \  . 


i,n 


(2) 


where  n^  is  defined  by 


(2) 


(V1  iftili*l 


‘il 
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t 

I 


We  proceed  to  utilize  this  data  to  obtain 


r  (2) 

x~  *  max  min  t  . 

J-l  icP  1,1 


which  again  has  survival  distribution  R.  Let 

(2) 


1,2 


if  t<’>  <  x2 


pO> 

i.l 


t(2)  -X  if  t(2)  >  * 
1,1  x2  1  Ci,l  2 


and  for  J  >  2 


t(3)  - 

t.J 


:<2> 

l.J+1 

„(2) 


(2) 


.(2) 


if  tj'  '  «  Xj  and  j  «  n^  -  1 


if  t 


(2) 


’l.j  ~  ‘1,1  *  *2  “d^ni 
Combining  the  equations,  we  find  explicitly  that 


(2) 


•::i  ■< 


1.3 

if 

*1.1 

< 

*1 

’  *1.2 

1.2 

if 

*1.1 

> 

X1 

’  *1.1 

a  m  -  X. 

if 

t 

< 

X. 

t 

1,2  2 

1.1 

1 

*  1.2 

•  X  •  x 

i.l  1  2 

if 

*1.1 

> 

X1 

‘  *1.1 

These  cases  correspond,  respectively,  to  the  situation  when  after 
two  system  simulator  trials  the  1th  component  had  failed  twice,  had  not 
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failed  the  first  time  but  did  fall  the  second,  had  failed  the  first  tine 
but  not  the  second  and  lastly  had  not  failed  either  time. 


We  now  define  the  induction  step:  Civen  W  >_  1  and  a  set  of  data 

(k)  (k)  ,  .  (k) 

:1,1*'  *ti,ni(k)  f«ri  «h«e  >1.  we  set 


*k  *  max  min  |t<k)( 
j-1  IcPj  '  *  ' 


and  generate  a  new  set  of  data  for  k  +  1  by 


*.T  •  -  *4  *  % 

and  for  j  -  2 , • • • ,n*kfl)  where  n*k+1)  -  n*k)  -  t*k*  > 


t(k+l)  (k) 

i.j  i,j+l 


/r(k)  t(k)  \  r(k) 

\  i.j  Ci,j+1/  Ci.l 


We  begin  the  induction  by  setting 


t(1)  -  t 

i.j  i.J 


i  - 

j  -  l,”*,n{1)  -  n 


i  * 


Thus 


we  calculate  from  the  data  a  sample,  label  it,  xn»***»xi  k 


where  each  x,  is  independent  with  survival  distribution  k  and 
*  »  * 


k^  »  max 


1..  .  /  (J)  (J)  .  „(j)\  ,  n| 

(j:  min  ^  ,n2  >  -  0( 


and  we  note  that 
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min(n,  . .  n  )  <  k,  <  ^  n.  -  m  +  1 
1 » *  »  m  1  i»l  ^ 


Thus  as  an  unbiased  estimate  of  R(t)  consider 


(3.4) 


Rx(t) 


_L  V 


l  j»l 


2  (t<Xlj} 


However,  the  sample  values  x.  ..•••,x1  ,  depend  upon  the  first 

I ,  I  1 9  k  ^ 

arrangement  of  the  data  (t.  ..••*,t.  )  for  i  =  l,"’,m.  There  are 

m  1 

all  together  p  =  J~|  (n . ! )  possible  permutations  of  these  sample  values. 
i-1 

Since  each  arrangement  of  the  values  is  equally  likely,  in  order  to 
utilize  more  of  the  information  available  in  the  sample  we  consider  the 
estimate  obtained  by  averaging  over  all  of  these  equally  likely 
permutations,  namely 


1  p  ~ 

(3.5)  U(t)  -  -  S  R.  (t)  for  t  >  0 

pfi  J 

where  j  =  l,’**,p  denotes  one  indexing  of  the  p  permutations  and  the 
resulting  estimate  of  R(t)  defined  similarly  to  R^(t). 

As  a  matter  of  practical  interest,  this  estimate  cannot  be  usable 
unless  the  number  of  failures  n^  for  i  =  l,'-*,m  are  all  rather  small. 
Fortunately  for  the  applications  intended  in  the  estimation  of  high 
reliability,  this  is  usually  the  case. 
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4.0  THE  DISTRIBUTION  OF  THE  SIMULATED  SAMPLE  SIZE 

We  now  wish  to  evaluate  the  probability  of  a  given  subset  of  m 
components  having  failed  by  the  time  the  system  has  failed.  Let 
AC{1,2, • ’ • ,m}  be  a  set  of  indices.  The  probability  that  exactly  this 
set  of  components  indexed  by  A  will  be  failed  when  the  system  fails  is 
given  by 


(4.1) 


fA(A)  =  P 


r 

max  min 


J-l 


icPj  A 


T 


where  X  is  the  system  life  defined  in  Equation  (3.3).  To  see  this  note 
that  all,  and  only,  the  components  indexed  by  A  must  have  failed  and 
these  failures  must  have  effected  the  failure  of  each  minimal  path,  i.e.. 


min  T.  £  min  T 

ieP  A  ieP .  i 

j  J 


The  reverse  inequality  is  always  true,  and  a  moment's  reflection  verifies 
(4.1). 


This  discrete  distribution  on  the  set  of  subsets  of  {l,2,*’-,m}  is 
rather  complicated  to  express  in  general.  We  now  consider  the  special 
case  of  a  series  system. 

In  the  case  of  a  series  system  there  is  only  one  minimal  path,  namely 

m 

the  entire  set  of  components.  It  then  follows  that  X  =  min  T  .  Elemen- 

i-1  1 

tary  calculation  shows  that  f (A)  =  0  unless  A  equals  a  singleton  set, 


in  whicn  case 
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P 


rr 

min  T 
i=i 


<30 

/ 

r-wl 

e  J 

o 

m 

1 

X.e  J  dt 
3 


9 


where  indicates  the  summation  from  i  =  l,***,m  with  i  4  j  , 

(4.2)  f({j»  =  ~~  =  Pj  for  j  *  l,***,m  . 


Thus  for  a  series  system  we  have  a  multinomial  probability  distribution 
that  any  one  of  the  m  components  will  fail  and  be  the  one  causing  system 

A.  t_ 

failure.  The  probability  that  the  j  component  will  fail  is  p^  for 
J  ■  l,...,m  as  given  in  (4.2). 

We  recall  that  if  the  probability  of  success  is  p  for  each  trial, 
then  the  probability  that  the  success  occurs  at  trial  number  r  +  k 

is  given  by  the  negative  Binomial  distribution 

(4.3)  (kT1)Pr(l"P)k  k  =  0,1,2,...  , 

This  is  the  probability  that  exactly  k  failures  preceed  the  success. 

Consider  now  the  case  for  m  =  2  as  treated  in  [6]. 

Let  p^  be  the  probability  of  the  occurrence  of  event  and 

■  1-p^  he  the  probability  of  occurrence  of  event  Ej  (Here  E^JE^  is 

the  sure  event).  Then  the  probability  that  the  n^st  occurrence  of  E^ 

or  the  n„nc*  occurrence  of  E_  occurs  at  the  trial  is 

2  2 
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/v  „v  /k-l  \  nl  k"nl  .  /k-1  V  "2  k-n, 

(4.4)  82(k)  “(n1-l)Pl  P2  +(n2-l)P2Pl  2 


where 


min  (nltn2)  <  k  <  n1  +  n2  -  1  . 


This  formula  agrees  with  that  given  in  [6]. 


We  new  generalize  to  an  arbitrary  m.  The  probability  that  in  (k*l) 
trials  occurs  k^  times,  E2  occurs  k2  times,  etc.,  is 


(k-l)!  A  ki 
m -  n  Pi 


n  (k.).’ 

i-l  1 


where  ^  k  *  k  -  1 
i-l  1 


We  specify  that  the  n^  occurrence  of  Ej  occurs  at  k  th  trial.  We 
let  k  ■  n^  -  1  in  the  formula  above  and  multiply  by  p^,  the  probability 


that  occurs,  to  obtain 


(k-l).' 


(n.-n:  n  (k,).’ 
2 


n.  m  k 

pi  y». 


m 

where  ^  k.  -  k  -  n 
2  1 


Thus  the  probability  that  on  the  kc  trial  we  have  any  one  of  the 
events  "the  occurrence  of  E^  for  the  first  time  but  less  than  n^ 

occurrences  of  E^  for  i  4  j."  is 


(4.5) 


g  (k) 

U* 


■  v  Ii n  pk‘ 

WV.W1  2 


where  |~J 


m 

J  |  and 

i-l 

i*J 
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m 

min  (n.  ,  *  *  *  ,n  )  <  k  <  ^  n.  -  m  +  1 
1  m  —  —  *r*  l 


Also 


(4.6)  A 

j  »k 


m 

(kj.kj,* ' '  ,km) :  ^  k^k,  kj-n^,  kt  1»{-1  for  l^J 


with  the  convention  that  summing  over  the  vacuous  set  gives  zero.  We  see 
that  A.  =  0  unless  k  >  n. 

j  »n  -  j 

We  would  like  to  use  this  distribution  to  obtain  information  about 
the  size  of  the  simulated  system  sample.  We  first  consider  the  special 
case  of  the  system  sample  when  m  *  2,  the  density  of  which  has  been 
previously  given  in  Equation  (4.4).  Before  we  begin  this  study  we  set  out 
several  identities  which  we  will  use  subsequently. 

We  now  quote  two  identities:  Equations  26.5.26,  26.5  p.945.  Reference 
Cl].  For  integers  0  <  a  <  n,  and  0  p  1 


(4.8) 


1  J  3  I  (a,n-a+l) 


J-a 


(4.9) 


j=a  ^ 


where  q  ■  1  -  p  and  I^(n,m)  is  the  Incomplete  Beta  function  defined  by 


(4.10) 


i  .  -iin» 


r(n)r(m) 


f  n-l /,  .m-1 , 

x  (1-x )  dx  . 
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From  this  it  is  easily  checked  that 

(4.11)  I  (n,m)  +  I  (m,n)  ■=  1  . 

P  q 

We  now  prove 

Lemma  1:  For  integers  m,n  >  0 

(4.12)  V  (n^11)  p"qJ  *  I  (n,m)  . 

j-o  ~  p 

Proof:  It  follows  from  (4.8)  by  setting  a  =  0  that 

(4.13)  1  «  Ip(0,n+1)  for  any  n  ^  0 

Thus  by  setting  a  ■  0  in  (4.9)  we  realize  that  for  1  £  m  £  n 

(n^l1)pnq^  *  Iq(m,n)  +  Ip(n,m)  . 

The  last  equality  is  from  (4.11).  We  subtract  the  identity  in  (4.9),  with 
a  *  m,  rom  both  sides  to  obtain  (4.12). || 

Corollary:  For  integers  m  _>  n  >  0 

(4.14)  V  (*  !)pnqk  °  *  I  (n ,m-n+l) 

k-n  p 

Proof:  In  (4.12)  make  the  change  of  index  R  «  j  +  n  and  let  m  change 
to  m  -  n  +  1. | | 

We  now  make  use  of  these  preliminary  results  to  obtain  theorem:  The 
distribution  of  Kj  •  the  series  system  sample  size  for  structures  of  order 


1  - 


m-1 

V  + 

J-o  J-m 


n 

V 
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2  l«  given,  for  1  •  k  •  n t  +  n  -  1 ,  by 


<4.15) 


S<k)  -  1  I  <n.,k-n.+l) 
2  1-1  P1  1  1 


Hero  we  u«e  the  convention  from  (4.13)  that  I^(n,a)  -  0  for  integers 
n  '  1  i  n.  Letting  n.  ■  n1  +  n2,  the  expected  value  is 


(4.16) 


2  ni 

EK2  “  S  IT  ln  K+1  .*»•-*»,) 

2  1-1  Pi  Pi  1  l 


Proof:  From  (4.4)  we  have  that 


C2(k) 


*  1  R2(J>  “  ±  (mJ-l)Pllp2  Rl  +  ^  (m~  l) 

J-l  j-Uj Vml  V  1  2  j=n2  \m2  V 


n2  j“n2 
P2  ?! 


Now  we  apply  Equation  (4.14)  to  obtain  (4.15).  But  also 


i  •- a  r,  n  .-i 

L  /,  \  n.  k-n. 

_  k82(k)  "  1  ni  1  L  lPi  (1-Pa) 

k-1  2  i-1  1  k-1  \ni)  1  1 


to  which  we  also  apply  (4.14)  to  obtain  (4.16). 


We  now  obtain  a  generalization  of  this  result  for  the  case  of  a  series 
structure  of  order  m.  We  express  a  certain  probability  which  is  given  in 
terms  of  the  multinomial  density  as  an  integral  over  a  certain  set  of  the 
Dlrlchlet  density.  In  this  regard,  see  Wilks  [15],  pp.  177-178. 


Let  S  denote  the  simplex  of  dimension  m  defined  by 
m 


s  •  (x,  ,  *  •  *  ,x  ) :  0  <  X.  <•  1  for  i  =  l,***,m,  V  x,  <  1 

m  x  ni  ~  i  i  1  — 
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Lemma  2:  For  all  m  >  2  and  all  J  •  1,***,« 


n.-l  n.  i — 1  n. ,  ,"1  —  1 


.  ”5  ...  X1  ...  “  * 

k?°  kj.l-°  kj«-°  k»"-°  r("j> 1 

r(n.)  [  [  nl_1  n2_1  nm-r1/i  vV'j 

-  ..  /  Xl  x2  O-Xj— xm_{)  <V*dVl 

n/V  T .  fm) 


where  (m)  for  j  <  m  is  the  subset  of  the  m  -  1  dimensional  simplex 

S  ,  whose  m  vertices  are  the  points  (p,,**',p  ,)  (0,  •••,())  and 

m-I  i  m- l 

(6.  i » *  *  *  »<5  ^  m  J  for  i  =  l,***,m  -  1  but  i  +  j .  Here  6  is  the 
1.1  i,m-l  ij 

m-i 

Kronecker  delta  and  T  (m)  *  S  ,  -  U  T .  (m) . 

m  m-1  ..  j 

1”1 


Proof:  We  shall  give  a  proof  by  induction  but  in  fact  supply  only  the 
induction  step  from  m  *  3  to  m  =•  4.  The  general  proof  may  be  obtained 
merely  by  writing  out  the  expression  for  arbitrary  m  and  following  the 
steps  in  the  same  order.  We  have  proved  in  Lemma  1  that  for  m  *  2, 


n2  1  /k^+n.-U  n 

'i<2)  ’  C-0  ( V*  h  <1-p>) 


r(t>1+n2)  "j-l  n2-1 , 

r(n.)r(n-')  J  x  (l-x)  dx 

1  ^  o 


We  now  assume  the  truth  of  our  assertion  for  m  *  3,  namely 


V1  V1  T(k  +k  +n  )  n  k,  k_ 

Al(3)  3  k“0  k“0  r(ni)k2:k3:  pl  p2  p3 


r(n1+n2+n3) 

r(ni)r(n2)r(n3) 


q2Xl 

1  f  ^ - -m.-l  nu-l  m--l 

/  Pl  x2  (l-Xj_-x2)  i  dx2dxJ 


n 
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We  now  undertake  the  case  for  m  =  A 


”2  1  n3  1  n4  1  I'(k~+k^+k,+n1 )  n1  k,  k^  k, 
A.  (4)  =  V  V  V  2  3  4  1  1  2  3  4 

i  “  r\  ,  r\  .  t 


k2-o  k3  o  k4-o  r(ni)  n  , 

i=2 


By  altering  the  order  of  summation  we  obtain 


nl  k4  n„-l  m_-l  T, 


Pi  P2  P3  P4 


.  T1  Vv^iV  “r  “T  1  (l w^i) 

Ai(4)  =  N  T - T 7—  .1  r 

-*•  ■  -  1  ' "  *  '  ■  \nn^k/,  1,  =n  1,  =n  ‘ 


n,+k,  k.,  k. 
14  2  3 


— -  (1-P2-P3)  p2  P 


k4=0  ‘(n1)k4!(p1+p4)nl  *4  k2=0  k3=C  (ni+k4)k2:k3 

Applying  the  identity  given  by  A.^3)  with  n.^  =  +  k4»  P3  =  1  -  p2  -  p3> 

we  obtain 


V1  r< 

y 


k3-0  r(n1)r(n2)r(n3)k4: 


n,-l 

v  ^ 


Make  the  change  of  variable  y..  =  — — —  ,  y  =  x  resulting  in 

Pj+P^  ^  * 

(!,.  pyi  _iL_/V  r|VA>  A\  "r1  .  ,  .  .V1 

J  1  /.?  I  r,_,  '  (kl);  (p^  >1 


p2?i  i  <"i> 

Using  the  identity  for  A^(2)  in  the  angular  brackets,  we  have 


^-P/.yi 


r(n4)  (l-p4yi)  Jo 
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Make  the  transformation  from  (y^.j^.t)  into  by 


x 


1 


w 

1_p4yl 


x2 


ty2 

1-p4yl 


t[l-y1(p1+P4)-y2l 

1-p4yi 


which  has  inverse 


Plx2 


1  P1t+p4x1 


plt+p4Xl 


t  =  x^+x2+x  3 


and  Jacobian 


Pv^’*  \  Pi1 
VVVj /  '  (Pjt+p^)3  ' 


Substituting  into  the  integral  we  obtain  as  the  new  integrand 


n,— 1  n.-l  n~-l,  .n4  1 

x  1  x  2  x  3  (1— Xl-x?-x  ) 

12  3  1 


The  original  and  transformed  regions  of  integration  can  be  pictured: 


r 

y/ 


/ 

*/ 
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Each  edge  Is  transformed  into  the  edge  for  1  =  A, ••*,9 

with  Ei»e2,E3  being  transformed  into  the  origin  (0,0,0).  An  elementary 
calculation  verifies  this.  It  can  be  seen  that  the  tetrahedron  pictured 
is  T^(A)  as  claimed. | | 

From  (A. 5)  and  (A. 6)  we  have 


?  v  V  __r<an_-  n  p"i 

c-l  j-l  A“k  !  (nj)nj(ki):  j  1 


G  (n) 
m 


By  examining  (A. 6)  we  see  that  for  fixed  j  the  A  are  disjoint 

J  *  K 

for  different  k.  As  a  consequence  we  define 


n 

(.  »  U  A. 

j  * n  j  *  k 


III 

(kl»'**’Kn>  :  ^  ki  i  n»  *  n<  »  kj  i  ni-1  for  1 

1  J  J 


*  j 


and  then  we  write 


m 


G  (n)  =  ^  ^ 


j”1  x 


j  .n 


r(kj+*  •  *+k^_^+nj  +  *  •  "k^) 

r  (n^)!!  (k1).’ 


k.  n. 

nj  "2  V  • 


If  we  alter  our  notation  to  indicate  explicitly  the  dependence  upon 
parameters,  in  accord  with  precedence,  we  define  for  any  Tcsm 


.  .  C  C  m-1  n.-l 

1**1  ±n  x/  d-x1 
n  r(n  )  J  J  i-1 


IT(nl*,,,*nm) 


n  -1 

—  x  ,)  m  dx. *  *dx  . 
m- 1  1  m- i 


i  T 


Then  in  this  notation  we  have 
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Aj(B)  *  ITj(»)(nl*'*,*n») 


We  may  now  check  that  we  have  a  bona  fide  distribution  function  since 


CJn.-m+l)  -  ^  ITJ(.)(nl‘-“*n.)  “  IUTj(.)(nl*  — “  1  * 


since  UTj  (m)  -  S(n_1  and  by  the  corresponding  property  of  the  Dirichlet 
distribution  we  have  unity. 

We  now  evaluate  the  expected  sample  size 


n.-m+l 


n . — m+1  n 


EK 


"l 


I  w  I  I  nj  p"1 

R-l  k«l  j-1  A  'VY  V 

j  »k 


By  comparison  with  Lenma  2,  we  see  after  rearranging  summations. 


m  n, 

EKm“  J|1^ITj(.)(nl*-,*nj-l*V1’*“*n->  * 


The  above  result,  while  interesting,  has  the  disadvantage  of  not  being 
directly  computable  since  tables  of  the  Dirichelet  distribution  are  not 
available  like  those  of  the  Incomplete  Beta  function.  However,  an 
approximation  can  be  found. 

Pi  m 

Define  p.  -  -r -  for  i  i  j  and  note  ^  p  -  1.  Then 

3  Pj  i-1  3 

i+i 
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“  .  ,  v  n.  k-n  „  (k-n  )!  m 

«.<*>  •  2  (. -i)')  2  v^tt  JJ, 

3'1  1  AJ.n  1  1-1 


(4.17) 


is  another  formula  for  the  density.  In  this  form  we  see  the  second 
sunroation  is  unity  for  k  sufficiently  small.  Thus  we  have  an  approxima¬ 
tion  and  upper  bound. 


m  ,  j,  ,  <  n.  k-n, 

8"<k>  5  j=i  (”rl)pJ  <1"p^ 


min  n^^R^n.-m  +  l 


and  proceeding  exactly  as  in  the  case  m  »  2  we  find 


m  n 


EK  <  f  I  (n.+l,  n.-m+2-nJ 
"  _  j-1  PJ  Pi  1  3 


We  now  examine  the  accuracy  of  this  approximation  for  the  case  m  »  3.  Let 


3  .  n  k-n 

>3<k>-  i,  V 


where  the  definition  of  H  may  be  inferred  from  Equation  (4.17)  above. 

J  *  * 

We  shall  calculate  H,  only  and  obtain  the  others  by  symmetry.  Assume 

l»k 

that  k  >_  n^  then  by  definition 


Hi,k“  AZ  k^T 

l.n 


(k-n, ) •  k2  k^ 
P21P31 


2 

j-vk 


where  u^  »  min  (n2  •  1,  k  *  n^) ,  v^  “  max  (k  -  n^  -  n^  +  1,0),  and  we 
note  v^  <_  u^  for  n^  <_  k  <_  n^  +  n2  +  n^  -  2.  Since  u^  £  k  -  n^,  we  have 
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Using  the  synmetry  of  the  Incomplete  Beta  function  and  the  notation 
x+  =  max  (x,0)  allows  us  to  obtain 


((k  “  «x  -  n3  +  1)  »  n3)  +  1  ((k  -  n1 


where  we  recall  the  Equation  (4.13).  Thus  by  symmetry  we  see  that 

H,  ■  1  if  k  <  min  n.  -  n.  -  1:  for  i  t  jl 
Jk  -  i  | 
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5.0  THE  LIKELIHOOD  RATIO  AND  THE  SERIES  SYSTfct 

For  any  coherent  structure  *  with  associated  reliability  function 
h,  there  exists  a  series  system,  the  reliability  of  which  bounds  the 
system  reliability  h  from  below,  i.e.. 


(5.1) 


h(X)  >  exp  - 


n 

~  Vi 

J-l  J  J 


where  is  a  known  weighting  factor  determined  from  h  (or  4)  for 


Because  of  this  fact,  we  will  in  this  section  consider  only  the  cose 
in  h(X)  -  -EujjXj  and  obtain  a  lower  confidence  bound.  We  think  this  is 
the  most  Important  case. 


We  will  follow  the  general  results  which  have  been  presented  in  an 
earlier  publication  [9].  However,  as  a  convenience,  we  reparaetttrlxe  by 
imposing  the  restriction  in  the  form  that  the  f.n  h(X)  is  constant,  and 
equate 

~  [I>(X)  -  6  In  h(X))  .  0  . 

3>J 

Thus  we  obtain,  instead  of  the  general  equation  (1.3),  as  given  in  [ 9 ] . 


(5.2) 


h. 


where 

total 


tj  is  the  total  list  time  for  the 
number  of  failures 


component  and 


Is  the 
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Vs  > 


■  —6  co 

j  j 


j  =  i,* 


1  ,m 


Thus  in  this  particular  case  it  is  unnecessary  to  use  the  general 
contractive  map  theorems  in  order  to  calculate  X(6)  =  (X  (6),***,  m<6). 
For  this  special  case  we  find,  using  the  definition  of  A  given  in  [9] 


A  (6  ) 


where 

confidence  bound, 


for  j  =  l,**»,m.  In  accord  with  finding  only  a  lower 
we  want  to  solve  for  x  >  0  such  that 


(5.3) 


A(x)  =  -*5  x*(D 


where  X2(D  is  the  100yth  percentile  of  the  Chi-square  distribution  with 
one  degree  of  freedom.  Call  the  solution  of  (5.3)  the  value  5  .  Then 


h  X(6+)  =  exp 


j  =  l 


T 


+ 

Y 


1+Y 

is  an  (approximate)  lower  bound  for  h(X)  of  level  — ,  rather  than  of 
level  y»  since  we  are  obtaining  only  a  one-sided  confidence  bound. 

We  now  exhibit  a  practical  method  for  the  determination  of  6+.  For 
a  given  y.  0  <  Y  <  1  there  exists  an  x  >  0  such  that  f(x)  =0  where 

f(x)  =  -A (x)  -  h  X2(l) 
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(5.4) 


The  solution  of  f(x)  ■  0  must  be  unique  since 


m  s . 

f'(x)  ■  x  V  - -  >  0 

1“1  (ij-x) 


whenever  0  <  x  *  min  =  T(i)*  which  is  a  more  stringent 

condition  than  that  given  In  [9].  But  note  that 


m  t  ,+x 

f"(x)  «  V  s  - -  >  0 

i“l  (tj-xr 


for  0  <  x  <  . 

Thus  we  see  that  both  f'.f",  which  are  continuous,  do  not  vanish 
for  0  <  x  <  These  are  sufficient  conditions  that  the  Newton 

Iteration  procedure,  namely 


t(,|rl> 

xk '  Vi  '  f 1  <xi^i> 


k  =  1,2,- 


will  converge  to  the  value  5  . 

We  now  state  the 

Theorem  :  Let  the  data  (t^n^)  i  =  l,***,m  be  given,  where  t^ 
represents  the  total  test  time  for  the  it^1  component  and  n^  _>  1, 
represents  the  number  of  failures  of  that  component  during  that  time.  If 
Wj  Is  the  multiplicity  of  the  i^  component  in  any  structure  and 

t i  ■  then 
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exp 


m 

.  \ 


3-1  (T,/.)-*, 


(5.5) 


for  0  <  t  <  t.,,/6 
(1)  Y 


f°r  ‘  i  ’a)'1, 


1+Y 

is  a  lower  confidence  bound  of  level  — ,  where  0  <  y  <  1  is 
preselected,  lor  the  system  reliability  for  all  time  t  >  0.  The  quantity 
6*  is  the  solution  of  the  equation  f(x)  -  0  and  f  was  defined  in 
equation  (5.4). 


Proof.  We  have  only  to  remark  that  the  selection  of  a  time  scale  in 
terms  of  mission  length  was  arbitrary  so  that  the  bound  derived  previously 
can  be  used  for  the  reliability  at  all  times. || 


-29- 


6.0  A  NUMERICAL  ILLUSTRATION 

As  a  numerical  Illustration  of  the  behavior  of  the  previously  outlined 
procedure,  we  shall  study  Its  performance  on  a  specified  series  system  with 


ten  components.  Take  m  ■  10.  We  shall  assume  that  I  •  1  for 
j  -  1,*>*,10.  Thus  the  true  reliability  of  the  system  Is,  by  e 
t  >  0.  We  also  assume  that  Oj  ■  -  1  and  thus  t  •  t^  for 

j  =*  1,  •  •  •  ,m. 


■lOt 


for 


We  will  now  generate  10  exponential  variates,  **ch  wt c H 

unit  mean  and  solve  the  equation  f(x)  ■  0  where 


(6.1) 


and  Is  a  constant  determined  by  the  nominal  level  of  the  confidence 

bound. 


We  find  that  for  y  -  .95,  c  95  ■  11.353.  Call  the  solution  of  (6.1) 
the  value  <5*.  The  lower  bound  for  the  reliability  is  by  (2.5) 


(6.2) 


exp 


-  "  f-M 

1-1  \t . /t-6' 


./t- 
1  Y 


for  0  <  t  *•  f  t.,. 

Y  (1) 


and  the  confidence  level  Is  97.5. 


Generating  forty  independent  observations  of  an  exponential  variate 
with  unit  mean  resulted  in  the  following  four  samples: 
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(1) 

(2) 

(3) 

(4) 

1.305 

1.889 

.2331 

3.258 

1.346 

3.864 

.8881 

.1848 

1.483 

.7789 

.04059 

.7594 

.2931 

.4825 

.8329 

2.420 

.2282 

1.171 

.1948 

.8638 

.3489 

.5642 

1.332 

.5307 

1.342 

.3525 

2.105 

.06695 

.7171 

.9037 

1.144 

.8239 

.3397 

.5590 

1.203 

.2452 

1.126 

.5445 

.07427 

.2306 

Solving  (6.1)  by  machine  program  and  calculating  (6.2)  for  each  set 


of  observations  yielded  the  confidence  bounds  which  are  summarized  visually 
in  Figure  1. 
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Figure  1.  97.5%  lower  confidence  bounds  on  the  reliability  of  a  10 

component  system  based  on  independent  samples. 

(0)  is  the  true  reliability  e  for  t  >  0 

(i)  is  the  confidence  bound  based  on  sample  (i)  for 

i  -  1,2, 3, 4. 


-31- 


Aa  a  further  Illustration  of  the  stochastic  behavior  of  this  method, 
we  shall  repeat  the  entire  procedure  two  thousand  times,  but  instead  of 
calculating  the  entire  lower  bound  function  we  shall  only  compute  (3.2) 
at  t  ■  .01.  Then  we  shall  make  a  frequency  histogram  of  the  values  of 
the  reliability  bounds  for  the  specified  value  t  *  .01.  The  twenty 
percentile  points,  successive  differences  being  .05,  of  the  empiric 
distribution  are: 


Percentile 

Percentile  Point 

.05 

0.106621 

.10 

0.297174 

.15 

0.417770 

.20 

0.492659 

.25 

0.552798 

.30 

0.596595 

.35 

0.632835 

.40 

0.665383 

.45 

0.689521 

.50 

0.707729 

.55 

0.730936 

.60 

0.750021 

.65 

0.767430 

.70 

0.782541 

.75 

0.798792 

.80 

0.815686 

.85 

0.833291 

.90 

0.851064 

.95 

0.877483 

1.00 

0.940218 

A  graph  of  the  empiric  distribution  is  given  in  Figure  2.  Note  that 
the  true  reliability  of  e  *  .904837  slightly  exceeded  the  nominal 
97.5  percentile.  In  fact,  the  actual  count  was  1979  values  less  than 
e”*^  out  of  the  2,000  observations  sampled.  This  was  approximately  the 
99th  percentile. 
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Thus  we  see  the  stated  confidence  level  of  97.5  percent  appears  to  be, 
in  this  instance,  slightly  conservative.  To  check  this  we  repeated  this 
entire  experiment  a  second  time  and  we  observed  1,990  out  of  2,000  observa¬ 
tions  of  the  reliability  bound  were  less  than  e"*1,  which  increases  our 
suspicion  of  a  slightly  conservative  tendency  for  the  level  of  confidence 


in  this  case. 
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Ths  determination  of  a  confidence  bound  using  s  procedure  which  is  valid 
when  a  large  n unbar  of  life  length  observations  heve  been  Bade  for  each  com¬ 
ponent  when,  in  fact,  only  one  observation  has  been  taken  of  each  coaponent 
life  length  is  about  aa  far  from  the  conditions  of  known  validity  as  possible, 
and  it  leaves  the  exact  confidence  level  open  to  question. 


As  a  comparison,  we  also  construct  the  lower  97 . 52  confidence  bound  for 
the  system  reliability  of  a  10  component  series  system,  each  component  of 
which  has  the  same  reliability  using  ten  observations  of  each  component  life 
length.  The  much  improved  result  is  presented  in  the  graph  of  Figure  3.  A 
table  of  the  values  of  the  lower  97.5%  confidence  bound  on  the  same  system 
reliability  but  with  twenty  observations  on  each  component  is  given  below: 


True 

Lower 

Time 

Reliability 

Confidence  Bound 

0 

1.000 

1.000 

.2 

.819 

.815 

.4 

.670 

.663 

.6 

.549 

.538 

.8 

.449 

.435 

1.0 

.368 

.351 

1.2 

.301 

.283 

1.4 

.247 

.227 

1.6 

.202 

.182 

1.8 

.165 

.146 

2.0 

.135 

.116 

The  improvement  is  obvious. 

While  such  examples  as  these  can  never  prove  anything  in  general  about 
the  adequacy  of  this  approximation,  they  do  not  indicate  that  it  cannot  be 
used,  with  suitable  caution,  in  those  cases  where  the  exact  distribution  is 


unknown. 
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Figure  3.  A  lower  97.5%  Confidence  Bound  on  the  Reliability 

of  a  10  Component  Series  System  With  10  Observations 
on  Each  Component. 
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7.0  SOME  PROBLEMS  IN  DETERMINING  THE  ASYMPTOTIC  DISTRIBUTION 

It  is  clear  that  for  each  fixed  t,  the  stochastic  variable  U(t),  as 
defined  in  (3.5),  is  a  U-statistic  in  the  sense  of  Haeffding  [5].  In  a  way 
we  are  returning  to  a  suggestion  made  by  Joan  Rosenblatt  in  [12]  concerning 
the  use  of  a  U-statistic  to  compute  reliability  bounds.  However,  we  are  now 
combining  such  statistics  with  special  properties  of  the  exponentially 
distributed  component  data  and  more  recent  results  concerning  the  structure 
function. 

Clearly,  U(t)  is  unbiased  for  R(t)  for  each  t  >  0.  Moreover,  U 
is  asymptotically  a  Gaussian  Random  element  (in  the  appropriate  Banach  space)  , 
since  for  every  element  V  the  inner  product 

r 00  i  P  i  ( 

/  V (t)dU(t)  -  -  -  V  -±-  £  V(x  ) 

0  P  i-1  Ki  j-1  1J 

is  asymptotically  a  normal  random  variable  under  mild  conditions  as  p  -*•  ®. 

Let  us  consider  the  case  where  we  have  been  given  the  vectors  of  failure 
data  as  defined  iu  (3.1).  Call  it  £  .  We  can  define  an  estimate 

u*(t)  -  A  v  r  (t) 
v  )-l  1 

where  the  index  j*l,**‘,v  is  a  number  arbitrarily  chosen  and  may  be  less 
than  p  and  thereby  not  cover  all  possible  promulatlons  of  the  elements  in 
each  component  of 


(51»***'V  ‘ 
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This  less  restrictive  estimate  U*  is  constructed  by  picking  v  such 

o 

permutations  independently,  from  the  p  ■  II  (n.!)  distinct  permutations 

i-1 

which  are  possible,  with  Identically  uniform  chances. 


Obtaining  the  estimate  U*  is  computationally  feasible  for  v  of 
moderate  size,  while  the  computation  time  necessary  to  obtain  all  p 
permutations  for  U  may  not  be  realistic  if  the  sample  sizes  n^,  or  the 
system  order  m,  are  large.  Of  course  U*  is  unbiased,  as  in  U.  However, 
we  Indicate  one  other  reason  that  U*  may  be  preferable. 


Consider  the  covariance  of  U.  Since 


EU(t)U(t+s)  ■  ^  ER  (t)R  (t+s) 

i.jK 

we  see  that  this  computation  reduces  to 


\  K« 


E\(t)Ei(t+s)  ■ E  ^  I  {t <  xikHt  +  0 '  ’V  • 


But  now  not  only  do  the  sample  sizes  u^  depend  upon  the  particular  j 
permutation  chosen,  but  so  do  the  actual  system  failure  times  x^ .  Thus 
the  evaluation  would  depend  upon  a  functional  relationship  being  determined 
between  these  random  variables  and  the  index  of  the  permutation  enumeration. 
Whether  or  not  the  substitution  of  U*  for  U  will  eliminate  this 


difficulty  is  not  known  at  the  present  time,  but  it  is  under  investigation. 


As  an  illustration  of  the  type  of  estimates  that  this  method  gives,  we 
exhibit  the  graphs  in  Figure  4  of  two  estimates  of  the  system  reliability  of 
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Figure  4.  Two  different  reliability  estimates  l'j(t)  and  l'2(t),  each 

based  on  96  permutations  of  three  sets  of  sample  data  of  sizes 
2,  4  and  2,  respectively,  for  each  component,  for  the  "2  out  of 
3"  three  component  system  with  reliabilitv  given  bv  R(t) 

-  e-2t(3-2e-t). 
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a  simple  two-out-of-three  system,  each  estimate  based  on  the  generation  of 
data  from  the  independent  exponential  observations  of  the  reliability  of 
each  component.  The  data  for  these  two  estimates  are  as  follows: 

Observations  Used  in  U^ 

Component  1  2.45413,  1.71585 

Component  2  .49114,  1.52854,  .52064,  1.06873 

Component  3  .31766,  2.13006 

Observations  Used  in 

Component  1  1.54401,  .39385 

Component  2  .13779,  .89004,  .07049,  1.62566 

Component  3  .75851,  .12614 

All  component  data  were  machine  generated  with  a  true  exponential 
distribution  with  unit  mean.  The  set  of  96  possible  permutations  were 
listed  by  the  machine  and  each  empirical  distribution  combined  in  the 
manner  indicated  in  the  equations . 

In  conclusion,  it  is  clear  that  this  method  certainly  improves  the 
system  reliability  estimated  with  a  small  amount  of  data.  That  we  cannot 
yet  determine  the  covariance  in  order  to  apply  the  asymptotic  normal  theory 
and  obtain  confidence  bounds  is  regrettable,  but  doubtless  this  defect  will 


be  overcome  soon. 
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One  of  the  problems  that  has  been  of  concern  for  a  number  of  years  is  the 
following:  Suppose  that  there  exists  a  series  system  of  ta  exponentially  live 

components  and  we  ask  that  the  system  be  qualified  for  service  by  demonstrating  a 
reliability  that  equals,  or  exceeds,  a  specified  value  1  -  with  a  confidence 
level  at  least  1  -  y  (Here  a  and  y  are  small).  This  paper  addresses  the 
question  of  how  this  can  be  demonstrated  using  only  data  on  the  reliability  of  the 
components,  where  the  reliability  design  goals  for  each  components  must  be 
apoortloned,  as  well  as  the  confidence  levels  at  which  the  design  goals  must  be  met 
in  order  to  satisfy  the  overall  system  reliability  requirement.  Another  question 
that  is  addressed  is  the  calculation  of  the  probability  that  the  system  reliability 
exceeds  its  goal.  The  purpose  of  the  paper  is  to  make  a  comparison  between 
competing  theories  for  the  abo/e  situation  when  the  components  have  exponential  life 

li  ngths. 
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